Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb652f88-6cee-34be-bc2f-32dd7ed313b2.roa
File:                     fb652f88-6cee-34be-bc2f-32dd7ed313b2.roa (raw, json)
Hash identifier:          lqQhzhjN+ntqyH+RjBghFKeIWOHLCbq0Q0cXDnPW+S4=
Subject key identifier:   D9:25:B1:7C:41:5E:4B:CC:A7:12:BE:2B:DC:45:D4:91:24:BD:F6:0A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B2C548A291570AE6593AB4680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb652f88-6cee-34be-bc2f-32dd7ed313b2.roa
Signing time:             Fri 12 Sep 2025 19:33:36 +0000
ROA not before:           Fri 12 Sep 2025 19:33:36 +0000
ROA not after:            Thu 11 Dec 2025 20:33:36 +0000
asID:                     401152
IP address blocks:        23.27.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:54:8a:29:15:70:ae:65:93:ab:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 12 19:33:36 2025 GMT
            Not After : Dec 11 20:33:36 2025 GMT
        Subject: CN=6ef34466-8012-4b56-a321-31f6518a6996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:fd:83:c1:92:49:8f:ac:08:84:82:e3:3a:
                    68:02:05:0b:3a:d2:05:29:4a:43:36:20:46:d5:ef:
                    51:52:93:a1:4b:7a:e2:18:90:47:17:47:93:83:7f:
                    3a:ad:51:c1:74:cb:83:f8:f9:ec:90:fe:e8:e0:4b:
                    df:6f:e0:66:1b:46:e9:f9:39:a8:ca:92:23:8c:a9:
                    11:74:8f:8e:6b:d5:ca:4e:77:f1:63:c8:90:7b:4a:
                    2d:1d:60:ed:9f:d1:2e:eb:5b:8b:3d:04:a0:72:f0:
                    82:20:2f:ff:88:c0:16:bf:16:cb:a8:df:72:03:85:
                    0a:69:9a:8d:64:d3:2c:0a:b5:50:67:8d:c7:fb:2d:
                    8b:6c:45:39:21:df:05:9e:b6:0a:a7:ac:b2:f3:b1:
                    f2:a9:8e:ee:e7:c2:79:36:02:8d:78:6d:fb:2c:68:
                    a6:45:b7:64:97:3d:29:c9:bf:50:b3:8b:79:2c:49:
                    c4:d5:d3:0e:6c:7f:00:05:28:6d:f3:46:ea:60:47:
                    83:ac:3c:a1:8c:2e:de:e9:28:a1:a8:ee:8a:6f:37:
                    28:5b:cf:29:75:7d:ef:9c:2a:6d:15:a2:40:48:84:
                    aa:1d:22:0c:62:aa:cb:dc:af:3b:20:ba:8c:05:3a:
                    2b:a0:c1:8a:04:7a:56:52:32:6b:68:13:29:ab:7b:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:25:B1:7C:41:5E:4B:CC:A7:12:BE:2B:DC:45:D4:91:24:BD:F6:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fb652f88-6cee-34be-bc2f-32dd7ed313b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:52:e5:c8:a8:83:7e:6b:43:cb:24:a6:d8:05:92:43:71:
         24:b4:26:dd:81:4d:e2:b0:9b:21:15:fe:39:4d:22:b3:fe:a6:
         22:a3:9d:c7:a9:42:a3:d1:7e:b2:81:5e:9b:a2:00:05:3d:cd:
         78:80:40:93:d1:92:b2:41:90:8d:14:25:2c:a9:94:75:f5:42:
         e0:71:ff:ef:a1:ed:b6:4e:3f:ea:43:33:84:ab:cc:58:a1:18:
         53:67:c1:8c:cb:08:66:fd:d2:91:ab:57:d4:19:c7:c5:c2:51:
         98:27:e8:c4:c8:2f:3e:0f:62:9d:7b:e2:97:6b:db:ab:ae:bb:
         f3:b6:13:42:bc:d1:65:15:d1:1f:c4:4e:18:aa:e2:b2:48:6d:
         a8:c2:76:aa:7a:95:f1:de:8e:0b:ff:98:79:e5:b6:a3:38:de:
         90:b2:fc:be:e7:f4:0f:96:b1:df:1d:c7:70:2d:78:08:5c:53:
         b3:4e:a6:e0:7b:65:aa:d6:a3:06:cd:f6:e4:ca:05:2a:67:32:
         55:71:3f:1d:84:c0:bb:0a:05:8b:c3:5a:b6:64:a9:30:7b:ff:
         a7:36:1c:d1:38:3b:8b:1f:0a:dc:41:c0:45:3c:95:2a:99:a2:
         8c:06:ea:11:4c:85:fb:a8:86:78:2d:e1:17:96:4b:8d:c8:33:
         37:e2:0c:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEssVIopFXCuZZOrRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkxMjE5MzMzNloXDTI1MTIxMTIwMzMzNlowLzEtMCsGA1UEAxMk
NmVmMzQ0NjYtODAxMi00YjU2LWEzMjEtMzFmNjUxOGE2OTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjH9g8GSSY+sCISC4zpoAgULOtIFKUpDNiBG
1e9RUpOhS3riGJBHF0eTg386rVHBdMuD+PnskP7o4Evfb+BmG0bp+TmoypIjjKkR
dI+Oa9XKTnfxY8iQe0otHWDtn9Eu61uLPQSgcvCCIC//iMAWvxbLqN9yA4UKaZqN
ZNMsCrVQZ43H+y2LbEU5Id8FnrYKp6yy87HyqY7u58J5NgKNeG37LGimRbdklz0p
yb9Qs4t5LEnE1dMObH8ABSht80bqYEeDrDyhjC7e6SihqO6KbzcoW88pdX3vnCpt
FaJASISqHSIMYqrL3K87ILqMBToroMGKBHpWUjJraBMpq3sHHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNklsXxBXkvMpxK+K9xF1JEkvfYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmI2NTJmODgtNmNlZS0z
NGJlLWJjMmYtMzJkZDdlZDMxM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTjUuXIqIN+a0PLJKbYBZJDcSS0Jt2BTeKwmyEV/jlNIrP+piKjncep
QqPRfrKBXpuiAAU9zXiAQJPRkrJBkI0UJSyplHX1QuBx/++h7bZOP+pDM4SrzFih
GFNnwYzLCGb90pGrV9QZx8XCUZgn6MTILz4PYp174pdr26uuu/O2E0K80WUV0R/E
Thiq4rJIbajCdqp6lfHejgv/mHnltqM43pCy/L7n9A+Wsd8dx3AteAhcU7NOpuB7
ZarWowbN9uTKBSpnMlVxPx2EwLsKBYvDWrZkqTB7/6c2HNE4O4sfCtxBwEU8lSqZ
oowG6hFMhfuohngt4ReWS43IMzfiDMU=
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:33:49 2025 by rpki-client